vmware windows servers vlan

Hi, we have one VMware ESXi host v6, and have two w2012 R2 web servers on it, we have given them different local subnet IPs but want to know if there are some VMware specific security we can use / vlan / firewall / switch etc, to separate them into effectively their own dmz, they are used externally by clients for websites, so they share the same internet connection, and as they are the same single host physical server, they share the same NIC.

is there anything with VMware we use to lock them down from each other more?
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
VMware vSphere can support VLANs, and VMware vSphere can use different vSwitches, to keep the traffic separate between VMs.

You would connecy each VM to a virtual machine portgroup with the VLAN Tag number, and then your vSwitch would need to be connected to a network trunk, with the tagged vLANS, configured in the physical switch for your network ports on the switch.
exact1Author Commented:
ok that does mean we need a physical switch with the VLANs set up as well? we don't have that in this environment.

Also we do not have a license on the ESXi host (yet) its on the free version. So no vSphere server either.
I should have mentioned this is the free version, we do have the paid for version on another network, but that does not help here.

this host is the only physical host on a spare fibre line we have for wireless clients in the office, that's why I want to lock the web servers down (from each other) as well.

sorry if I did not make that clear.....
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Okay, if you do not have a physical switch with VLANS, then there is not much further isolation, that you can do, that you have not already done, with different IP Address allocations, and subnets.

VMware vSphere Hypervisor or ESXi both supports VLANs (free and licensed).
Acronis True Image 2019 just released!

Create a reliable backup. Make sure you always have dependable copies of your data so you can restore your entire system or individual files.

exact1Author Commented:
Hi, ok thanks for that Andrew, one thing we did think of was, there are two physical NICs on the host (HPDL360G5) currently we are only using one, there is a 8 port gigabit switch next to the server, could we use both NICs and specify two "networks" in vSphere client?

is that something we could then use to further isolate ?
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
You could use more network interfaces on the host, but unless you have a way "in the physical switch" to isolate the traffic, the traffic will mingle again!

so I do not really see the benefit.

I'm afraid VLAN or different physical switches, cabling, and networking is the answer, but if they share the same internet connection......

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
exact1Author Commented:
ok thanks Andrew.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.